Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: ZN3KUYVaIv/EGAanDpRRxYPfSygsqzUyZpjYNB9KT5I=
Subject key identifier: 03:0B:27:E3:00:5B:8F:73:E0:A3:E7:59:FE:87:A4:AB:D2:D8:F6:BA
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 01A0D200C11E0030BD05A50C22D92533EBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 1126
Signing time: Thu 24 Sep 2026 06:00:59 +0000
Manifest this update: Thu 24 Sep 2026 06:00:59 +0000
Manifest next update: Fri 25 Sep 2026 06:00:59 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: hzG60wmSBKuutVcPNjA3+GV3V7T0o+w5z/Cahal/Y44=)
2: JB8RpMy8Elqc90uZwoSTL7Ub9OM.roa (hash: EhChNPxJv+f83uqvMXFZRPaKproZQgsDNAIW+MBK7d0=)
3: iRQgfXGareNueuLCIctR3v98BqA.roa (hash: kAKY6Tag+JlVYUh6YTHrUL0leqbQ2DPtbgkhBL53tDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:c1:1e:00:30:bd:05:a5:0c:22:d9:25:33:eb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Sep 24 06:00:59 2026 GMT
Not After : Sep 25 06:00:59 2026 GMT
Subject: CN=030b27e3005b8f73e0a3e759fe87a4abd2d8f6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:a4:36:11:6b:c4:ac:ca:52:8d:50:e1:d2:
34:b6:8f:ea:82:14:fc:ed:bc:82:c6:22:5c:25:eb:
f0:2b:05:81:97:ef:ac:04:5f:8f:3b:25:3a:f0:c0:
71:62:df:a4:07:fd:fd:9c:19:9e:fd:00:a2:3d:d4:
0d:f1:66:24:03:2f:fa:04:b7:a7:7e:61:78:69:5c:
ad:28:71:4f:8a:1d:3a:59:f9:97:63:a7:81:d8:0f:
bf:dc:81:98:6c:7c:fa:26:e3:4f:be:45:5f:f9:34:
a9:50:f7:02:68:ba:2d:9b:86:cc:5c:ad:9d:53:21:
96:e8:62:22:27:f9:ca:19:93:4a:4a:88:47:f3:0a:
7e:97:54:67:d1:b2:b6:b0:13:da:0c:a8:14:f5:c6:
b9:77:5a:5e:09:97:62:70:e4:6b:db:db:b2:9d:bd:
24:66:7d:b7:d8:d9:a6:50:d0:a1:a6:8c:d4:c2:86:
0c:e1:f8:80:1d:08:65:59:75:8d:76:c8:35:ec:75:
89:03:7d:0f:88:41:d2:4e:a6:96:5e:9a:1b:a4:c5:
72:fa:3c:84:6e:19:fe:47:76:10:72:f9:90:f7:7b:
e0:80:cd:30:d2:7a:c5:b0:6f:d2:c3:1c:ea:ec:c0:
4d:25:56:b2:af:61:e9:64:30:a5:f9:bf:8d:41:3b:
8d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0B:27:E3:00:5B:8F:73:E0:A3:E7:59:FE:87:A4:AB:D2:D8:F6:BA
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a0:93:ab:c6:de:9a:46:ed:d7:83:2f:de:70:38:58:7a:b8:
d9:6e:cd:40:33:35:32:5f:21:d1:32:fd:d3:40:40:f6:e3:78:
4a:5a:c3:cc:70:ba:41:8c:41:0d:15:c1:78:f5:8e:e7:15:1a:
39:a2:34:55:71:00:02:bf:48:5c:59:5e:e2:e1:90:f1:a6:09:
40:2b:eb:c9:db:fe:fc:bb:08:fb:f3:4b:7a:47:bb:b0:5f:aa:
e1:ec:0d:ea:22:0d:6a:6a:26:13:b6:3e:d1:84:b2:4a:5d:76:
fb:d6:60:6d:df:5c:4c:c3:ee:88:46:36:f4:19:6c:99:d3:61:
01:4a:ab:b8:8d:36:78:b2:43:17:b6:e6:35:69:01:2f:f8:5e:
f1:e4:1f:e9:bc:a5:5f:f8:5d:44:13:ae:01:cd:cf:46:7c:00:
51:6c:b7:a8:e4:57:2f:0a:d5:f9:46:8e:29:8f:76:50:5d:96:
1e:56:f7:c6:86:43:09:da:8d:85:f1:6a:55:14:0b:24:a1:ef:
21:3c:01:80:b9:08:18:7a:71:44:b3:60:f9:d8:24:bb:94:0b:
0d:11:10:fd:fe:5b:c2:8e:7d:80:cf:0a:76:65:6e:68:09:b9:
12:54:70:7a:67:16:16:d4:a8:2f:eb:a0:92:fc:e0:d6:53:60:
97:db:77:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAMEeADC9BaUMItklM+uiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZDI3MmE4ZGMwNDFmNWFkYzdhYmQwMGQ2NGQzZjMyYzIw
NGRhYjIwHhcNMjYwOTI0MDYwMDU5WhcNMjYwOTI1MDYwMDU5WjAzMTEwLwYDVQQD
EygwMzBiMjdlMzAwNWI4ZjczZTBhM2U3NTlmZTg3YTRhYmQyZDhmNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ6kNhFrxKzKUo1Q4dI0to/qghT8
7byCxiJcJevwKwWBl++sBF+POyU68MBxYt+kB/39nBme/QCiPdQN8WYkAy/6BLen
fmF4aVytKHFPih06WfmXY6eB2A+/3IGYbHz6JuNPvkVf+TSpUPcCaLotm4bMXK2d
UyGW6GIiJ/nKGZNKSohH8wp+l1Rn0bK2sBPaDKgU9ca5d1peCZdicORr29uynb0k
Zn232NmmUNChpozUwoYM4fiAHQhlWXWNdsg17HWJA30PiEHSTqaWXpobpMVy+jyE
bhn+R3YQcvmQ93vggM0w0nrFsG/Swxzq7MBNJVayr2HpZDCl+b+NQTuN5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMLJ+MAW49z4KPnWf6HpKvS2Pa6MB8GA1UdIwQY
MBaAFOXScqjcBB9a3Hq9ANZNPzLCBNqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80MTdjMWQtYTJlNC00NGE2LWFmMjQt
ZDRmNTAyNzYwMGFlLzEvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80MTdjMWQtYTJlNC00NGE2LWFmMjQtZDRmNTAyNzYwMGFl
LzEvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKCTq8be
mkbt14Mv3nA4WHq42W7NQDM1Ml8h0TL900BA9uN4SlrDzHC6QYxBDRXBePWO5xUa
OaI0VXEAAr9IXFle4uGQ8aYJQCvrydv+/LsI+/NLeke7sF+q4ewN6iINamomE7Y+
0YSySl12+9Zgbd9cTMPuiEY29BlsmdNhAUqruI02eLJDF7bmNWkBL/he8eQf6byl
X/hdRBOuAc3PRnwAUWy3qORXLwrV+UaOKY92UF2WHlb3xoZDCdqNhfFqVRQLJKHv
ITwBgLkIGHpxRLNg+dgku5QLDREQ/f5bwo59gM8KdmVuaAm5ElRwemcWFtSoL+ug
kvzg1lNgl9t3bQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:46:19 2026 by rpki-client